Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: 6dbJK9AiAIbIWMGH9OSSEYgE6kDg1cr8zGIRQ2B/qzM=
Subject key identifier: 29:C3:68:19:CD:21:2B:77:C0:1B:AE:E9:3A:7B:B3:52:CD:B2:0E:B3
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 0194BBCED4116B5CBAE560FFF7E3F4CD71C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 0BF1
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: vSnQeXSACh/qxOccmKgs46nhQtDl6eVg+H4SaKHHwso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:11:6b:5c:ba:e5:60:ff:f7:e3:f4:cd:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=29c36819cd212b77c01baee93a7bb352cdb20eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:da:fa:89:30:34:b4:7a:10:63:f5:6f:cc:
1c:d4:7c:c4:df:15:f8:28:4f:3e:b6:d5:c8:36:b3:
a1:27:d4:29:0c:f7:51:c2:71:b2:09:b4:6b:37:5a:
5c:bb:25:88:bc:0b:ee:29:7e:ed:76:8a:d3:9a:8f:
ba:11:e0:f2:d0:9c:b3:2e:04:d6:e5:a3:92:09:91:
02:cd:03:43:4f:e8:06:7b:26:01:b3:56:e4:d5:a9:
68:bb:5d:99:26:c2:1d:bc:a5:47:ce:09:94:16:3f:
19:bf:dd:cd:95:76:89:e5:08:1c:e8:bb:44:3e:61:
2b:cf:e3:d4:c1:af:09:85:19:78:26:62:c6:0b:cb:
83:22:0b:04:01:3f:84:a4:0a:81:ae:f7:9e:11:9d:
38:47:60:89:3f:f4:9a:00:0f:a0:2b:c2:86:f1:b2:
b7:14:14:ee:a9:b8:5a:20:1c:d9:63:55:2d:33:4a:
20:36:bb:27:c5:f6:6f:70:d2:e3:f2:ec:00:6c:a6:
e8:65:f0:e8:ba:c5:ce:fe:18:95:64:bc:32:39:69:
34:50:16:25:2d:f7:16:95:cf:bd:9c:49:34:12:c1:
43:31:fb:9c:c6:28:67:bc:e5:27:13:09:a0:88:c1:
ed:e0:35:9e:c5:90:56:00:ee:d7:b5:db:86:60:7b:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:68:19:CD:21:2B:77:C0:1B:AE:E9:3A:7B:B3:52:CD:B2:0E:B3
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:64:60:32:ee:a0:1f:ea:bd:01:2b:57:e7:db:22:13:41:
7e:89:7b:de:1c:71:cf:1f:fd:7a:de:a9:b0:32:46:20:c1:c3:
28:44:62:25:0b:3d:9c:59:1b:34:05:cd:3b:06:cc:73:6a:83:
78:c8:83:f4:a8:ee:d8:0b:77:39:0b:4e:da:f2:e6:e2:e3:76:
1d:17:32:bb:95:74:ee:a8:ae:3b:f5:46:26:2c:43:42:bb:03:
63:ce:90:4b:fd:ff:e2:6e:5e:b1:49:e7:da:6c:cc:10:02:7e:
82:19:9b:5d:9f:cc:f1:31:43:bd:a0:5b:01:f0:f6:cc:33:67:
19:67:62:c9:5a:64:fc:e5:95:ac:5a:01:05:ac:89:d5:3f:3d:
be:87:0a:ac:32:5b:3f:ce:4f:8c:57:27:ea:cf:21:88:30:51:
c8:2b:86:ce:39:0e:79:76:a4:c9:9a:9e:31:ca:ed:6e:3b:ac:
7c:21:ea:b8:2b:39:d3:5b:8e:5d:ea:3b:0b:7b:a9:d5:8f:cc:
11:1f:29:f6:39:4d:10:b7:5f:da:8f:a3:9b:39:11:95:07:31:
fd:c1:95:9e:1b:d4:ee:91:02:32:c5:97:b2:87:a7:f8:d8:68:
6a:21:fc:3d:2c:48:32:7f:c4:65:4d:77:ad:fd:42:a2:17:ed:
99:3f:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:25 2025 by rpki-client